Exploitation Summary
EIP tracks 3 public exploits for CVE-2017-1000487. PoCs published by dawetmaster, andikahilmy, shoucheng3.
AI-analyzed exploit summary This repository contains the vulnerable source code of plexus-utils, specifically the AbstractScanner.java file, which is affected by CVE-2017-1000487. The vulnerability involves improper handling of file paths, leading to potential arbitrary file read/write operations.
Description
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
Exploits (3)
This repository contains the vulnerable source code of plexus-utils, specifically the AbstractScanner.java file, which is affected by CVE-2017-1000487. The vulnerability involves improper handling of file paths, leading to potential arbitrary file read/write operations.
This repository contains the vulnerable source code of plexus-utils, specifically the AbstractScanner.java file, which is affected by CVE-2017-1000487. The code demonstrates the vulnerable patterns and file scanning logic but does not include an exploit or detailed analysis.
This repository contains the source code of the vulnerable version of plexus-utils (3.0.15) affected by CVE-2017-1000487, a command injection vulnerability in the `InterpolationFilterReader` class. The provided files include the vulnerable code but do not contain an exploit or detailed analysis.
References (11)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H